Lucene search
K

89 matches found

vulnersOsv
vulnersOsv
added 2026/03/22 1:16 a.m.1 views

cloudbreak (=0.1.1) potentially affected by CVE-2019-25585 via deluge (=2.2.0)

deluge PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on deluge and may be impacted: - cloudbreak =0.1.1 Source cves: CVE-2019-25585 Source advisory: OSV:PYSEC-2026-38...

6.9CVSS5.8AI score0.00021EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2026/03/22 1:16 a.m.1 views

cloudbreak (=0.1.1) potentially affected by CVE-2019-25586 via deluge (=2.2.0)

deluge PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on deluge and may be impacted: - cloudbreak =0.1.1 Source cves: CVE-2019-25586 Source advisory: OSV:PYSEC-2026-39...

6.9CVSS5.8AI score0.00021EPSS
Exploits1
NVD
NVD
added 2026/03/22 1:16 a.m.0 views

CVE-2019-25585

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...

6.9CVSS0.00021EPSS
Exploits1References4
OSV
OSV
added 2026/03/22 1:16 a.m.2 views

DEBIAN-CVE-2019-25586

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

5.5CVSS6.1AI score0.00021EPSS
Exploits1References1
OSV
OSV
added 2026/03/22 1:16 a.m.12 views

PYSEC-2026-39

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

5.5CVSS6AI score0.00021EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2026/03/22 1:16 a.m.2 views

CVE-2019-25585

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...

6.9CVSS6.1AI score0.00021EPSS
Exploits1References5
CVE
CVE
added 2026/03/22 12:11 a.m.6 views

CVE-2019-25586

Deluge 1.3.15 contains a local-denial-of-service vulnerability triggered by an excessively long string in the From URL field when adding a torrent; sending about 5000 characters can crash the application. The underlying issue is a buffer/length-related input handling vulnerability in the URL fiel...

6.9CVSS6AI score0.00021EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/22 12:11 a.m.0 views

CVE-2019-25586 Deluge 1.3.15 Denial of Service via URL Field

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

6.9CVSS6AI score0.00021EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/22 12:11 a.m.3 views

CVE-2019-25586

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash...

6.9CVSS6AI score0.00021EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/03/22 12:11 a.m.28 views

CVE-2019-25585 Deluge 1.3.15 Denial of Service via Webseeds Field

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...

6.9CVSS0.00021EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/22 12:11 a.m.2 views

CVE-2019-25585 Deluge 1.3.15 Denial of Service via Webseeds Field

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...

6.9CVSS6AI score0.00021EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/22 12:11 a.m.0 views

CVE-2019-25585

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...

6.9CVSS6AI score0.00021EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/03/22 12:0 a.m.3 views

Deluge 安全漏洞

Deluge is a fully featured cross-platform BitTorrent client software developed by the Deluge team. Version 1.3.15 of Deluge contains a security vulnerability. This vulnerability stems from a denial-of-service attack in the URL field, which could allow local attackers to cause the application to...

6.9CVSS5.8AI score0.00021EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-16216

Malware in sbrugna...

8.8CVSS9.1AI score0.01226EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2025/05/11 12:0 a.m.2 views

Fedora 41 : deluge (2025-d23a07ad00)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d23a07ad00 advisory. https://deluge.readthedocs.io/en/deluge-2.2.0/changelog.html 2.2.0 2025-04-28 Breaking changes Removed Python 3.6 support Python = 3.7 Core Fix GHSL-2024-189...

5.7AI score
Exploits0References1
OSV
OSV
added 2024/06/15 12:0 a.m.7 views

OPENSUSE-SU-2024:12322-1 deluge-2.1.1-3.1 on GA media

These are all security issues fixed in the deluge-2.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

6.1CVSS6.3AI score0.00632EPSS
Exploits1References1
OSV
OSV
added 2024/06/15 12:0 a.m.8 views

OPENSUSE-SU-2024:10713-1 deluge-2.0.3-4.7 on GA media

These are all security issues fixed in the deluge-2.0.3-4.7 package on the GA media of openSUSE Tumbleweed...

9.8CVSS9.3AI score0.00506EPSS
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2022/10/16 12:0 a.m.27 views

Deluge: Cross-Site Scripting

Background Deluge is a BitTorrent client. Description Deluge does not sufficiently sanitize crafted torrent file data, leading to the application interpreting untrusted data as HTML. Impact An attacker can achieve XSS via a crafted torrent file. Workaround There is no known workaround at this tim...

6.1CVSS1.4AI score0.00632EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/10/16 12:0 a.m.17 views

GLSA-202210-07 : Deluge: Cross-Site Scripting

The remote host is affected by the vulnerability described in GLSA-202210-07 Deluge: Cross-Site Scripting - The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies t...

6.1CVSS6.6AI score0.00632EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/08/27 12:0 a.m.45 views

Deluge Web-UI vulnerable to XSS through a crafted torrent file

The Deluge Web-UI is vulnerable to cross-site scripting through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies the user with a malicious torrent file can execute arbitrary Javascript code in the context ...

6.1CVSS6AI score0.00632EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder